Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/TWbavJSlzl0yvrhE4VudASOWZFo.roa
File: TWbavJSlzl0yvrhE4VudASOWZFo.roa (raw, json)
Hash identifier: ur2N9sV1aoXG7CrT2cW2W2OoDmeobx2g2/VRIr5D2Vk=
Subject key identifier: 4D:66:DA:BC:94:A5:CE:5D:32:BE:B8:44:E1:5B:9D:01:23:96:64:5A
Certificate issuer: /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial: 019634E930819500F0B5A4D539C01FE51A44
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/TWbavJSlzl0yvrhE4VudASOWZFo.roa
Signing time: Mon 14 Apr 2025 15:26:59 +0000
ROA not before: Mon 14 Apr 2025 15:26:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208532
IP address blocks: 45.130.88.0/22 maxlen: 22
45.130.88.0/24 maxlen: 24
45.130.89.0/24 maxlen: 24
45.130.90.0/24 maxlen: 24
45.130.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:e9:30:81:95:00:f0:b5:a4:d5:39:c0:1f:e5:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Validity
Not Before: Apr 14 15:26:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d66dabc94a5ce5d32beb844e15b9d012396645a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:f9:17:fe:be:d2:b2:07:b0:2e:02:f2:12:
22:33:ba:ae:0a:fa:8d:33:7f:7b:ca:28:57:b1:28:
f8:db:b9:9f:90:1a:a8:d5:97:f4:57:63:14:aa:2f:
78:1f:ab:14:67:1e:8e:98:6a:0c:3d:ec:9b:d6:79:
bd:f1:41:76:6d:2e:5f:93:9a:04:ad:fd:78:e5:3f:
34:85:1c:5d:2e:b6:32:5f:0f:34:c1:58:60:09:60:
b9:3c:f2:11:fb:c1:49:0f:f0:d3:8a:e5:dc:01:a1:
99:b6:be:a1:63:13:dc:46:56:69:c9:a4:87:14:18:
24:f2:da:5c:6c:ec:67:57:30:64:95:ad:14:6f:66:
31:84:db:1c:7e:21:2e:91:78:89:2a:87:58:a5:d2:
61:75:b7:f1:87:47:19:ed:99:b8:65:79:fe:19:ad:
7b:45:f4:d0:64:fc:7b:10:d5:cb:b2:ea:c2:42:a7:
30:41:cf:85:2c:93:e3:a4:7f:ee:a9:da:ad:c1:fd:
e8:41:ec:2f:53:bd:e9:74:bc:6b:74:5a:f5:b5:e8:
8f:f7:dc:b5:59:5b:31:eb:b2:47:48:ba:d8:ea:af:
e0:4b:7b:b5:21:80:07:c2:97:87:f7:62:5b:2b:08:
2d:69:60:c7:f4:e0:c6:0e:e1:aa:7f:9e:a5:c9:b9:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:66:DA:BC:94:A5:CE:5D:32:BE:B8:44:E1:5B:9D:01:23:96:64:5A
X509v3 Authority Key Identifier:
keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/TWbavJSlzl0yvrhE4VudASOWZFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.88.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a2:7e:11:06:59:16:38:f0:5e:6a:9c:05:f5:a9:af:e5:f0:
49:aa:17:88:38:9f:d4:58:f5:0c:80:bc:ec:21:1d:da:b0:6d:
17:be:bb:6e:8a:a4:b5:6f:ae:e3:db:92:50:a9:90:a5:53:2a:
6f:30:da:6a:be:7a:72:d1:93:8f:1d:de:bc:65:66:96:72:88:
7d:c7:51:39:18:93:69:6a:b6:8c:d0:3c:5e:77:2e:ed:e8:ea:
27:27:6f:9a:60:0a:de:8c:3e:d9:c3:08:c1:16:b1:4b:7d:27:
a6:57:8a:13:75:64:e0:1f:20:f0:aa:56:c6:ac:a8:5a:56:3c:
1f:19:ad:52:38:7d:9e:f2:2f:9e:e5:55:ac:73:be:e2:e8:cc:
22:39:67:21:d2:b4:53:84:ee:51:ba:e5:93:6b:3f:10:68:3f:
a1:b1:fa:df:c4:bd:d6:f9:c0:ad:71:c3:f7:b9:a7:86:41:d8:
3f:f6:e0:f2:a6:79:5f:30:cb:28:1d:fc:e6:39:4d:8b:2a:b7:
23:c9:c7:12:fc:11:f3:1f:5b:f8:61:cb:07:71:47:66:da:7a:
4a:0b:1e:00:dc:01:bc:e0:4c:de:48:29:4b:f0:18:39:c5:98:
71:2d:ab:e8:eb:41:3a:e0:0c:06:30:b8:5c:ae:e8:3e:e6:b8:
c1:63:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:50:10 2025 by rpki-client